Question 69:
A CloudFormation template is being used to deploy an RDS instance. AWS Secrets Manager is being used for the management of database credentials. How can the CloudFormation template reference the database credentials?
Answer options:
A.{
"MyRDSInstance": {
"Type": "AWS::RDS::DBInstance",
"Properties": {
"DBName": "MyRDSInstance",
"AllocatedStorage": "20",
"DBInstanceClass": "db.t2.micro",
"Engine": "mysql",
"MasterUsername": "{{resolve:secretsmanager:MyRDSSecret:SecretString:username}}",
"MasterUserPassword": "{{resolve:secretsmanager:MyRDSSecret:SecretString:password}}"
}
}
}
B.{
"MyRDSInstance": {
"Type": "AWS::RDS::DBInstance",
"Properties": {
"DBName": "MyRDSInstance",
"AllocatedStorage": "20",
"DBInstanceClass": "db.t2.micro",
"Engine": "mysql",
"MasterUsername": "{{resolve:ssm-secure:username:1}}",
"MasterUserPassword": "{{resolve:ssm-secure:password:1}}"
}
}
}
C.{
"MyRDSInstance": {
"Type": "AWS::RDS::DBInstance",
"Properties": {
"DBName": "MyRDSInstance",
"AllocatedStorage": "20",
"DBInstanceClass": "db.t2.micro",
"Engine": "mysql",
"MasterUsername": { “Ref” : “username” },
"MasterUserPassword": { “Ref” : “password” }
}
}
}
D."Mappings" : {
"DatabaseCredentials" : {
"Username" : { "arn:aws:secretsmanager:region:123456789012:secret:username" },
"Password " : { "arn:aws:secretsmanager:region:123456789012:secret:password" },
}
},
…
{
"MyRDSInstance": {
"Type": "AWS::RDS::DBInstance",
"Properties": {
"DBName": "MyRDSInstance",
"AllocatedStorage": "20",
"DBInstanceClass": "db.t2.micro",
"Engine": "mysql",
"MasterUsername": { [ "DatabaseCredentials", { "Ref" : "Username" } ]},
"MasterUserPassword": { [ "DatabaseCredentials", { "Ref" : "Password" } ]}
}
}
}